@tacuchi/agent-workflow-cli 20.22.0 → 20.24.0

package/dist/application/semantic-operation/protocol.js

@@ -0,0 +1,247 @@
+import { createHash } from "node:crypto";
+/**
+ * The bounded CLI↔AI handshake shared by every hybrid command.
+ *
+ * The split is the whole point: the CLI owns inventory, numbering, validation,
+ * authorization and writing; the AI owns exactly one semantic step —
+ * classification, synthesis or intent — and its answer is data to be validated,
+ * never an instruction to be trusted.
+ *
+ * Three stages, and only the third can touch the filesystem:
+ *
+ * - `prepare` builds a {@link SemanticRequest}: what was read, where writing is
+ *   allowed, the limits, and an `input_digest` sealing the state it saw.
+ * - `validate` parses the answer against that request and, if it survives,
+ *   returns a preview plus an `approval_digest` over the exact bytes proposed.
+ * - `apply` recomputes the input digest, checks the approval still matches, and
+ *   only then publishes.
+ *
+ * Validation is manual (DEC-001: no Zod) and **fail-closed**: anything absent,
+ * malformed, stale, oversized or outside the allowlist stops before the first
+ * write and comes back with a next action.
+ */
+export const SEMANTIC_PROTOCOL_VERSION = 1;
+/** Stable SHA-256 of a value: object keys sorted so equal state digests equally. */
+export function semanticDigest(value) {
+    return createHash("sha256").update(canonicalJson(value), "utf8").digest("hex");
+}
+function canonicalJson(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value) ?? "null";
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    const entries = Object.entries(value)
+        .filter(([, v]) => v !== undefined)
+        .sort(([a], [b]) => a.localeCompare(b))
+        .map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`);
+    return `{${entries.join(",")}}`;
+}
+export function buildSemanticRequest(input) {
+    const request = {
+        version: SEMANTIC_PROTOCOL_VERSION,
+        operation: input.operation,
+        input_digest: semanticDigest(input.inputs),
+        contract: input.contract,
+        inventory: input.inventory,
+        allowed_destinations: input.allowedDestinations,
+        limits: input.limits,
+        read_set: input.readSet,
+        metrics: { request_bytes: 0, read_set_bytes: input.readSetBytes },
+    };
+    // Measured after the shape is final, then written back: the number describes
+    // the payload actually sent, which is what the spec 009 budgets will consume.
+    request.metrics.request_bytes = Buffer.byteLength(JSON.stringify(request), "utf8");
+    return request;
+}
+/**
+ * Parse and validate an answer against the request that produced it. Every
+ * rejection names the problem and a next action; none of them writes.
+ */
+export function parseSemanticResponse(raw, request) {
+    const parsed = parseJson(raw);
+    if (!parsed.ok)
+        return parsed;
+    const envelope = parsed.value;
+    const header = checkHeader(envelope, request);
+    if (header !== null)
+        return { ok: false, failure: header };
+    const state = envelope.state;
+    if (state === "ambiguous" || state === "unsupported") {
+        return {
+            ok: false,
+            failure: {
+                code: state === "ambiguous" ? "SEMANTIC_AMBIGUOUS" : "SEMANTIC_UNSUPPORTED",
+                message: envelope.reason ?? `la respuesta se declaró '${state}' sin explicar por qué`,
+                action: state === "ambiguous"
+                    ? "resolvé la ambigüedad y volvé a responder, o acotá la operación"
+                    : "la operación no aplica a este contenido: no hay nada que escribir",
+            },
+        };
+    }
+    const artifacts = checkArtifacts(envelope.artifacts, request);
+    if (!artifacts.ok)
+        return artifacts;
+    return {
+        ok: true,
+        value: {
+            version: SEMANTIC_PROTOCOL_VERSION,
+            operation: request.operation,
+            input_digest: request.input_digest,
+            state: "proposed",
+            ...(isRecord(envelope.decisions) ? { decisions: envelope.decisions } : {}),
+            artifacts: artifacts.value,
+        },
+    };
+}
+function parseJson(raw) {
+    if (raw.trim().length === 0) {
+        return {
+            ok: false,
+            failure: {
+                code: "SEMANTIC_RESPONSE_MISSING",
+                message: "no llegó respuesta semántica por stdin",
+                action: "volvé a invocar pasando el JSON de respuesta por stdin",
+            },
+        };
+    }
+    try {
+        return { ok: true, value: JSON.parse(raw) };
+    }
+    catch {
+        return {
+            ok: false,
+            failure: {
+                code: "SEMANTIC_RESPONSE_INVALID",
+                message: "la respuesta semántica no es JSON válido",
+                action: "reenviá la respuesta como un único objeto JSON completo",
+            },
+        };
+    }
+}
+function checkHeader(envelope, request) {
+    if (!isRecord(envelope)) {
+        return invalid("la respuesta no es un objeto JSON");
+    }
+    if (envelope.version !== SEMANTIC_PROTOCOL_VERSION) {
+        return invalid(`versión de protocolo no soportada: ${String(envelope.version)}`);
+    }
+    if (envelope.operation !== request.operation) {
+        return invalid(`la respuesta dice operación '${String(envelope.operation)}' y esta es '${request.operation}'`);
+    }
+    // The staleness seal: the world moved between prepare and this answer, so the
+    // inventory, the numbering and the duplicate check it reasoned over are gone.
+    if (envelope.input_digest !== request.input_digest) {
+        return {
+            code: "SEMANTIC_STALE",
+            message: "la respuesta responde a un estado anterior del workspace",
+            action: "volvé a correr prepare y respondé sobre el request nuevo",
+        };
+    }
+    const state = envelope.state;
+    if (state !== "proposed" && state !== "ambiguous" && state !== "unsupported") {
+        return invalid(`estado desconocido: ${String(state)}`);
+    }
+    return null;
+}
+function checkArtifacts(raw, request) {
+    if (!Array.isArray(raw) || raw.length === 0) {
+        return { ok: false, failure: invalid("una respuesta 'proposed' debe traer artifacts") };
+    }
+    if (raw.length > request.limits.max_artifacts) {
+        return {
+            ok: false,
+            failure: invalid(`${raw.length} artefactos exceden el máximo de ${request.limits.max_artifacts}`),
+        };
+    }
+    const seen = new Set();
+    const out = [];
+    for (const entry of raw) {
+        if (!isRecord(entry) || typeof entry.path !== "string" || typeof entry.content !== "string") {
+            return { ok: false, failure: invalid("cada artefacto necesita 'path' y 'content' de texto") };
+        }
+        const path = checkPath(entry.path, request.allowed_destinations);
+        if (!path.ok)
+            return path;
+        if (seen.has(path.value)) {
+            return { ok: false, failure: invalid(`el artefacto '${path.value}' viene repetido`) };
+        }
+        const bytes = Buffer.byteLength(entry.content, "utf8");
+        if (bytes > request.limits.max_artifact_bytes) {
+            return {
+                ok: false,
+                failure: invalid(`'${path.value}' pesa ${bytes} B y el máximo es ${request.limits.max_artifact_bytes} B`),
+            };
+        }
+        seen.add(path.value);
+        out.push({ path: path.value, content: entry.content });
+    }
+    return { ok: true, value: out };
+}
+/**
+ * A destination is only legal if it is workspace-relative and lands INSIDE one
+ * of the declared directories. Absolute paths, `..`, backslashes and bare
+ * prefix matches (`docs/specs-evil`) are all rejected — the allowlist is the
+ * write boundary, so it is checked on normalized segments, never on a string
+ * `startsWith`.
+ */
+function checkPath(raw, allowed) {
+    const path = raw.trim();
+    const reject = (why) => ({
+        ok: false,
+        failure: {
+            code: "SEMANTIC_PATH_REJECTED",
+            message: `destino no permitido ('${raw}'): ${why}`,
+            action: `escribí solo dentro de: ${allowed.join(", ")}`,
+        },
+    });
+    if (path.length === 0)
+        return reject("está vacío");
+    if (path.includes("\\"))
+        return reject("usa separador de Windows");
+    if (path.startsWith("/") || /^[A-Za-z]:/.test(path))
+        return reject("es absoluto");
+    const segments = path.split("/");
+    if (segments.some((s) => s === ".." || s === "." || s.length === 0)) {
+        return reject("contiene segmentos relativos o vacíos");
+    }
+    // A destination is either a directory to write INSIDE (persist, exports) or an
+    // exact file already identified as writable (fix-git's conflict set). Both are
+    // compared on segments, so `docs/research-evil` never passes as `docs/research`.
+    const inside = allowed.some((dest) => {
+        const destSegments = dest.split("/").filter((s) => s.length > 0);
+        if (segments.length < destSegments.length)
+            return false;
+        if (!destSegments.every((segment, i) => segments[i] === segment))
+            return false;
+        return segments.length > destSegments.length || path === dest;
+    });
+    if (!inside)
+        return reject("cae fuera de los destinos declarados");
+    return { ok: true, value: path };
+}
+/**
+ * Seal over the exact artifacts shown to the human. `apply` refuses anything
+ * whose digest differs, so what gets approved is what gets written — not a
+ * later edit of the same proposal.
+ */
+export function approvalDigest(response) {
+    return semanticDigest({
+        operation: response.operation,
+        input_digest: response.input_digest,
+        artifacts: (response.artifacts ?? []).map((a) => ({
+            path: a.path,
+            content_digest: semanticDigest(a.content),
+        })),
+    });
+}
+function invalid(message) {
+    return {
+        code: "SEMANTIC_RESPONSE_INVALID",
+        message,
+        action: "corregí la respuesta según el 'contract' del request y reenviala",
+    };
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=protocol.js.map

package/dist/application/semantic-operation/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/application/semantic-operation/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAmD3C,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClC,CAAC;AAaD,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,MAAM,OAAO,GAAoB;QAC/B,OAAO,EAAE,yBAAyB;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,oBAAoB,EAAE,KAAK,CAAC,mBAAmB;QAC/C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,OAAO;QACvB,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE;KAClE,CAAC;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,OAAO,CAAC,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACnF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,OAAwB;IAExB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAkC,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAE3D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB;gBAC3E,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,4BAA4B,KAAK,wBAAwB;gBACrF,MAAM,EACJ,KAAK,KAAK,WAAW;oBACnB,CAAC,CAAC,iEAAiE;oBACnE,CAAC,CAAC,mEAAmE;aAC1E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAEpC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,OAAO,EAAE,yBAAyB;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,KAAK,EAAE,UAAU;YACjB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,SAAS,EAAE,SAAS,CAAC,KAAK;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,wCAAwC;gBACjD,MAAM,EAAE,wDAAwD;aACjE;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,0CAA0C;gBACnD,MAAM,EAAE,yDAAyD;aAClE;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,QAAmC,EACnC,OAAwB;IAExB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,yBAAyB,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,sCAAsC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,OAAO,OAAO,CACZ,gCAAgC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,gBAAgB,OAAO,CAAC,SAAS,GAAG,CAC/F,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,IAAI,QAAQ,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,0DAA0D;YACnE,MAAM,EAAE,0DAA0D;SACnE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC7E,OAAO,OAAO,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,GAAY,EAAE,OAAwB;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,+CAA+C,CAAC,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,OAAO,CACd,GAAG,GAAG,CAAC,MAAM,oCAAoC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAChF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,qDAAqD,CAAC,EAAE,CAAC;QAChG,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,iBAAiB,IAAI,CAAC,KAAK,kBAAkB,CAAC,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CACd,IAAI,IAAI,CAAC,KAAK,UAAU,KAAK,qBAAqB,OAAO,CAAC,MAAM,CAAC,kBAAkB,IAAI,CACxF;aACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,GAAW,EAAE,OAAiB;IAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAyB,EAAE,CAAC,CAAC;QACtD,EAAE,EAAE,KAAK;QACT,OAAO,EAAE;YACP,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,0BAA0B,GAAG,OAAO,GAAG,EAAE;YAClD,MAAM,EAAE,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACxD;KACF,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAElF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC,uCAAuC,CAAC,CAAC;IACzD,CAAC;IACD,+EAA+E;IAC/E,+EAA+E;IAC/E,iFAAiF;IACjF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/E,OAAO,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,IAAI,KAAK,IAAI,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,sCAAsC,CAAC,CAAC;IACnE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAA0B;IACvD,OAAO,cAAc,CAAC;QACpB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,SAAS,EAAE,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;SAC1C,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO;QACP,MAAM,EAAE,kEAAkE;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/application/semantic-operation/publish.js

@@ -0,0 +1,80 @@
+import { dirname, join } from "node:path";
+export async function publishArtifacts(fs, root, artifacts, options = {}) {
+    const done = [];
+    for (const artifact of artifacts) {
+        const absolute = join(root, artifact.path);
+        const failure = await writeOne(fs, absolute, artifact, options, done);
+        if (failure !== null) {
+            await rollback(fs, done);
+            return { ok: false, failure };
+        }
+    }
+    return { ok: true, value: { written: artifacts.map((a) => a.path) } };
+}
+async function writeOne(fs, absolute, artifact, options, done) {
+    try {
+        await fs.mkdirp(dirname(absolute));
+        const previous = await readPrevious(fs, absolute);
+        if (previous !== null && options.overwrite !== true) {
+            return {
+                code: "PUBLISH_TARGET_EXISTS",
+                message: `'${artifact.path}' ya existe y no se autorizó sobrescribir`,
+                action: "confirmá la sobrescritura explícitamente, o publicá en otro destino",
+            };
+        }
+        if (previous === null) {
+            // Exclusive create closes the check-then-write window: a concurrent run
+            // that got there first loses here, not silently.
+            const { created } = await fs.writeTextExclusive(absolute, artifact.content);
+            if (!created) {
+                return {
+                    code: "PUBLISH_TARGET_EXISTS",
+                    message: `'${artifact.path}' fue creado por otro proceso durante la publicación`,
+                    action: "volvé a correr prepare: el inventario y la numeración cambiaron",
+                };
+            }
+        }
+        else {
+            await fs.writeText(absolute, artifact.content);
+        }
+        done.push({ absolute, previous });
+        return null;
+    }
+    catch (err) {
+        return {
+            code: "PUBLISH_FAILED",
+            message: `no se pudo escribir '${artifact.path}': ${errorText(err)}`,
+            action: "revisá permisos y espacio en disco, y volvé a intentar",
+        };
+    }
+}
+async function readPrevious(fs, absolute) {
+    if (!(await fs.exists(absolute)))
+        return null;
+    try {
+        return await fs.readText(absolute);
+    }
+    catch {
+        // Unreadable but present: treat it as existing so we never clobber blindly,
+        // and as unrestorable so a rollback leaves it exactly as it was found.
+        return "";
+    }
+}
+/** Undo in reverse order, best effort — a failed undo must not mask the cause. */
+async function rollback(fs, done) {
+    for (const entry of [...done].reverse()) {
+        try {
+            if (entry.previous === null)
+                await fs.remove(entry.absolute);
+            else
+                await fs.writeText(entry.absolute, entry.previous);
+        }
+        catch {
+            // ignore; the original failure is what the caller reports
+        }
+    }
+}
+function errorText(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=publish.js.map

package/dist/application/semantic-operation/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../../src/application/semantic-operation/publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkC1C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAkB,EAClB,IAAY,EACZ,SAA6B,EAC7B,UAA0B,EAAE;IAE5B,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACtE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,EAAkB,EAClB,QAAgB,EAChB,QAA0B,EAC1B,OAAuB,EACvB,IAAe;IAEf,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAElD,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO;gBACL,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,IAAI,QAAQ,CAAC,IAAI,2CAA2C;gBACrE,MAAM,EAAE,qEAAqE;aAC9E,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,wEAAwE;YACxE,iDAAiD;YACjD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,IAAI,QAAQ,CAAC,IAAI,sDAAsD;oBAChF,MAAM,EAAE,iEAAiE;iBAC1E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,wBAAwB,QAAQ,CAAC,IAAI,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE;YACpE,MAAM,EAAE,wDAAwD;SACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,EAAkB,EAAE,QAAgB;IAC9D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,uEAAuE;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,QAAQ,CAAC,EAAkB,EAAE,IAAe;IACzD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;;gBACxD,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/application/session-binding-service.js

@@ -0,0 +1,125 @@
+import { createHash } from "node:crypto";
+/**
+ * Durable conversation→session association.
+ *
+ * The registry lives at `.workflow/sessions/.bindings.json` — machine-local
+ * state, gitignored along with the sessions dir. Keys are the SHA-256 of the
+ * host's opaque conversation id (the raw id is NEVER persisted); values are
+ * canonical session folder names.
+ *
+ * Every function here is **lock-free**: the caller owns the workspace lock so
+ * one operation = one lock boundary (no nested acquisition). Reads are safe
+ * without the lock because `writeText` renames atomically onto the path.
+ *
+ * Validation is manual (DEC-001: no Zod) and **fail-closed**: an unreadable,
+ * malformed or unknown-version registry is reported as invalid and never
+ * overwritten — repairing it automatically would silently drop associations.
+ */
+/** Only this schema version is accepted. */
+export const BINDINGS_VERSION = 1;
+/** SHA-256 of the opaque conversation id — the only form that reaches disk. */
+export function hashContextId(contextId) {
+    return createHash("sha256").update(contextId, "utf8").digest("hex");
+}
+function parseBindingRegistry(raw) {
+    if (raw.trim().length === 0)
+        return { ok: true, registry: emptyRegistry() };
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { ok: false, reason: "el registro de bindings no es JSON válido" };
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        return { ok: false, reason: "el registro de bindings no es un objeto JSON" };
+    }
+    const { version, bindings } = parsed;
+    if (version !== BINDINGS_VERSION) {
+        return { ok: false, reason: `versión de registro no soportada: ${String(version)}` };
+    }
+    if (typeof bindings !== "object" || bindings === null || Array.isArray(bindings)) {
+        return { ok: false, reason: "el campo 'bindings' no es un mapa" };
+    }
+    const entries = {};
+    for (const [key, value] of Object.entries(bindings)) {
+        if (key.length === 0 || typeof value !== "string" || value.length === 0) {
+            return { ok: false, reason: `entrada de binding inválida en la clave '${key}'` };
+        }
+        entries[key] = value;
+    }
+    return { ok: true, registry: { version: BINDINGS_VERSION, bindings: entries } };
+}
+export async function readBindingRegistry(fs, paths) {
+    const path = paths.cwdSessionBindingsFile();
+    if (!(await fs.exists(path)))
+        return { ok: true, registry: emptyRegistry() };
+    let raw;
+    try {
+        raw = await fs.readText(path);
+    }
+    catch {
+        return { ok: false, reason: `no se pudo leer el registro de bindings (${path})` };
+    }
+    return parseBindingRegistry(raw);
+}
+/** Which session this conversation is associated with, if any. */
+export async function lookupBinding(fs, paths, contextId) {
+    const read = await readBindingRegistry(fs, paths);
+    if (!read.ok)
+        return { status: "invalid", reason: read.reason };
+    const folder = read.registry.bindings[hashContextId(contextId)];
+    return folder === undefined ? { status: "unbound" } : { status: "bound", folder };
+}
+/**
+ * Associate this conversation with `folder`, replacing only its own entry.
+ * `changed: false` when the association already pointed there (no write).
+ */
+export async function bindContextToSession(fs, paths, contextId, folder) {
+    const read = await readBindingRegistry(fs, paths);
+    if (!read.ok)
+        return { ok: false, reason: read.reason };
+    const key = hashContextId(contextId);
+    if (read.registry.bindings[key] === folder)
+        return { ok: true, changed: false };
+    const bindings = { ...read.registry.bindings, [key]: folder };
+    await writeBindingRegistry(fs, paths, bindings);
+    return { ok: true, changed: true };
+}
+/**
+ * Drop every association pointing at `folder` (session closed). Other
+ * conversations keep theirs — a closed session never redirects to another line.
+ */
+export async function invalidateBindingsTo(fs, paths, folder) {
+    const read = await readBindingRegistry(fs, paths);
+    if (!read.ok)
+        return { ok: false, reason: read.reason };
+    const kept = {};
+    let removed = 0;
+    for (const [key, value] of Object.entries(read.registry.bindings)) {
+        if (value === folder)
+            removed += 1;
+        else
+            kept[key] = value;
+    }
+    if (removed > 0)
+        await writeBindingRegistry(fs, paths, kept);
+    return { ok: true, removed };
+}
+function emptyRegistry() {
+    return { version: BINDINGS_VERSION, bindings: {} };
+}
+async function writeBindingRegistry(fs, paths, bindings) {
+    // Keys sorted so the file is byte-stable across runs regardless of insertion
+    // order (diffable, golden-friendly).
+    const sorted = {};
+    for (const key of Object.keys(bindings).sort()) {
+        const value = bindings[key];
+        if (value !== undefined)
+            sorted[key] = value;
+    }
+    const payload = { version: BINDINGS_VERSION, bindings: sorted };
+    await fs.mkdirp(paths.cwdSessionsDir());
+    await fs.writeText(paths.cwdSessionBindingsFile(), `${JSON.stringify(payload, null, 2)}\n`);
+}
+//# sourceMappingURL=session-binding-service.js.map

package/dist/application/session-binding-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-binding-service.js","sourceRoot":"","sources":["../../src/application/session-binding-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;;;;;;;;;;;;GAeG;AAEH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAgBlC,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;IAC5E,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAC/E,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAmD,CAAC;IAClF,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,EAAE,CAAC;QAC/E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,GAAG,GAAG,EAAE,CAAC;QACnF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAkB,EAClB,KAAmB;IAEnB,MAAM,IAAI,GAAG,KAAK,CAAC,sBAAsB,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;IAC7E,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,IAAI,GAAG,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAkB,EAClB,KAAmB,EACnB,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAkB,EAClB,KAAmB,EACnB,SAAiB,EACjB,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9D,MAAM,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAkB,EAClB,KAAmB,EACnB,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACxD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC;;YAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,EAAkB,EAClB,KAAmB,EACnB,QAAgC;IAEhC,6EAA6E;IAC7E,qCAAqC;IACrC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/C,CAAC;IACD,MAAM,OAAO,GAAoB,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACjF,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9F,CAAC"}

package/dist/application/session-close-service.js

@@ -1,55 +1,76 @@
 import { join } from "node:path";
-import { runHistoryUpdate } from "./history-update-service.js";
+import { historyFields, upsertHistoryRow } from "./history-update-service.js";
+import { withCwdLock } from "./lock-service.js";
 import { canonicalArtifactPath } from "./session-artifacts.js";
-import { CLOSED_MARKER, resolveSession } from "./session-resolver.js";
-export async function runSessionClose(fs, env, paths, input) {
+import { invalidateBindingsTo } from "./session-binding-service.js";
+import { CLOSED_MARKER, resolveSessionTarget, } from "./session-resolver.js";
+export async function runSessionClose(fs, paths, input) {
+    // Closing is destructive to continuity: it always names its target. Falling
+    // back to "the sole active one" would let a conversation close a line it
+    // never selected.
     if (!input.code)
         return { error: "--code es obligatorio" };
-    const session = await resolveSession(fs, env, paths, input.code, true);
-    if (!session)
-        return { error: `Sesión no encontrada: ${input.code}` };
-    // Persist the durable artifacts in the session folder (they survive close).
-    // CHECKPOINT is a resume safety net (no-op when the loop already wrote one).
-    // BACKLOG is NOT fabricated here: the owning loop writes a real BACKLOG.md
-    // only when there is deferred/followup content, so close no longer creates
-    // an empty boilerplate file. `backlog_path` still reports the canonical path.
+    const resolution = await resolveSessionTarget(fs, paths, { code: input.code, allowClosed: true });
+    if (resolution.outcome !== "resolved")
+        return { sessionError: resolution };
+    const session = resolution.session;
+    // Durable artifacts survive close. CHECKPOINT is a resume safety net (no-op
+    // when the loop already wrote one). BACKLOG is NOT fabricated: the owning loop
+    // writes it only when there is deferred content; `backlog_path` still reports
+    // the canonical path.
     const checkpointPath = canonicalArtifactPath(session.path, "checkpoint");
-    const backlogPath = canonicalArtifactPath(session.path, "backlog");
     await ensureFile(fs, checkpointPath, "# CHECKPOINT\n");
-    // Mark the session closed via the folder-local sentinel file.
-    // Sessions are internal/light: closing does not touch the project block.
-    await fs.writeText(join(session.path, CLOSED_MARKER), "");
+    const refs = input.refs?.trim();
+    const closure = await closeUnderLock(fs, paths, session, {
+        code: session.code ?? input.code,
+        ...(refs !== undefined && refs.length > 0 ? { refs } : {}),
+    });
+    if ("error" in closure)
+        return closure;
     const sessionClose = {
-        code: session.code ?? input.code ?? "",
+        code: session.code ?? input.code,
         folder: session.folder,
         closed: true,
         checkpoint_path: checkpointPath,
-        backlog_path: backlogPath,
+        backlog_path: canonicalArtifactPath(session.path, "backlog"),
+        ...(refs !== undefined && refs.length > 0 ? { refs } : {}),
+        bindings_invalidated: closure.bindings_invalidated,
+        ...(closure.history ? { history: closure.history } : {}),
+        ...(closure.history_error !== undefined ? { history_error: closure.history_error } : {}),
     };
-    if (input.refs && input.refs.trim().length > 0) {
-        sessionClose.refs = input.refs.trim();
-    }
-    // Sessions are gitignored (machine-local live log); HISTORY.md is the durable,
-    // committable record — close upserts its row here so it actually gets written
-    // (doctrine-only wiring proved dead: nothing ever called `aw history-update`).
-    // Non-fatal: a busy lock or a write failure never blocks closing.
-    try {
-        const history = await runHistoryUpdate(fs, env, paths, {
-            code: sessionClose.code,
-            state: "closed",
-            ...(sessionClose.refs !== undefined ? { refs: sessionClose.refs } : {}),
-        });
-        if ("error" in history) {
-            sessionClose.history_error = history.error;
+    return { sessionClose };
+}
+/**
+ * The whole shared-state mutation of a close, under ONE lock acquisition:
+ * invalidate the associations pointing here, write the `.closed` marker, upsert
+ * the HISTORY row. HISTORY goes through the lock-free primitive on purpose —
+ * its public command takes the lock itself, and nesting would deadlock.
+ *
+ * The registry goes FIRST: if it cannot be read, the close aborts having
+ * mutated nothing, rather than leaving a closed session that conversations are
+ * still associated with.
+ */
+async function closeUnderLock(fs, paths, session, row) {
+    const result = await withCwdLock(fs, paths, async () => {
+        const invalidated = await invalidateBindingsTo(fs, paths, session.folder);
+        if (!invalidated.ok) {
+            return { ok: false, failure: { error: invalidated.reason, code: "SESSION_BINDING_INVALID" } };
         }
-        else {
-            sessionClose.history = { action: history.action, state: history.state };
+        await fs.writeText(join(session.path, CLOSED_MARKER), "");
+        const closure = { bindings_invalidated: invalidated.removed };
+        try {
+            const history = await upsertHistoryRow(fs, paths, historyFields({ ...row, state: "closed" }, session, row.code));
+            closure.history = { action: history.action, state: history.state };
         }
-    }
-    catch (err) {
-        sessionClose.history_error = err instanceof Error ? err.message : String(err);
-    }
-    return { sessionClose };
+        catch (err) {
+            // Non-fatal, as before: the caller re-runs `aw history-update` on this.
+            closure.history_error = err instanceof Error ? err.message : String(err);
+        }
+        return { ok: true, closure };
+    });
+    if ("error" in result)
+        return { error: result.error, code: "LOCK_BUSY" };
+    return result.ok ? result.closure : result.failure;
 }
 async function ensureFile(fs, path, defaultContent) {
     if (await fs.exists(path))

package/dist/application/session-close-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-close-service.js","sourceRoot":"","sources":["../../src/application/session-close-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AA6BtE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAkB,EAClB,GAAY,EACZ,KAAmB,EACnB,KAAwB;IAExB,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAEtE,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,UAAU,CAAC,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAEvD,8DAA8D;IAC9D,yEAAyE;IACzE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAuB;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE;QACtC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;KAC1B,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,kEAAkE;IAClE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;YACrD,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,KAAK,EAAE,QAAQ;YACf,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,YAAY,CAAC,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,aAAa,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAkB,EAAE,IAAY,EAAE,cAAsB;IAChF,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO;IAClC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"session-close-service.js","sourceRoot":"","sources":["../../src/application/session-close-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,aAAa,EAGb,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAqC/B,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAkB,EAClB,KAAmB,EACnB,KAAwB;IAExB,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB;IAClB,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC3D,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,IAAI,UAAU,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3E,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IAEnC,4EAA4E;IAC5E,+EAA+E;IAC/E,8EAA8E;IAC9E,sBAAsB;IACtB,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACzE,MAAM,UAAU,CAAC,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAEvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACvD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;QAChC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAEvC,MAAM,YAAY,GAAuB;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC5D,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC;AAQD;;;;;;;;;GASG;AACH,KAAK,UAAU,cAAc,CAC3B,EAAkB,EAClB,KAAmB,EACnB,OAAqB,EACrB,GAAoC;IAMpC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,IAAqB,EAAE;QACtE,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,EAAE,CAAC;QAChG,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAY,EAAE,oBAAoB,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,EAAE,EACF,KAAK,EACL,aAAa,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAC9D,CAAC;YACF,OAAO,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,OAAO,CAAC,aAAa,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAkB,EAAE,IAAY,EAAE,cAAsB;IAChF,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO;IAClC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AAC3C,CAAC"}